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Amendments to the Claims; 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
1-15. (Canceled) 

1 6. (Currently Amended) A method of providing secure communication between a 
mobile node and home domain using a foreign domain, comprising: 

transmitting a registration request from the mobile node to the home domain the request 
comprising an identity of a user of the mobile node in encrypted form and network routing 
information in non-encrypted form; 

the home domain receiving and processing the registration request to generate a 
registration reply comprising one or more encryption keys for encrypting messages 
communicated between and among the mobile node, home domain, and the foreign domain^ 
wherein the one or more encryption keys are generated in response to the home domain 
requesting the one or more encryption keys ; and 

transmitting the registration reply from the home domain to the foreign domain and the 
mobile node. 

17. (Original) The method of claim 16, wherein transmitting a registration request from 
the mobile node to the home domain comprises: 

transmitting the registration request from the mobile node to the foreign domain; and 
transmitting the registration request from the foreign domain to the home domain. 

1 8. (Original) The method of claim 17, wherein transmitting the registration request 
from the foreign domain to the home domain comprises establishing a secure communication 
pathway between the foreign domain and the home domain. 
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19. (Original) The method of claim 17, wherein transmitting the registration request 
from the foreign domain to the home domain comprises establishing a secure communication 
pathway between the foreign domain and the mobile node. 

20. (Original) The method of claim 17, wherein transmitting the registration request 
from the foreign domain to the home domain comprises establishing a secure communication 
pathway between the home domain and the mobile node. 

2 1 . (Original) The method of claim 1 6, wherein processing the registration request from 
the mobile node within the home domain comprises decrypting the encrypted form of the identity 
of the user. 

22. (Original) The method of claim 16, wherein generating a registration reply 
comprises encrypting at least one of the encryption keys. 

23. (Original) The method of claim 22, wherein generating a registration reply 
comprises encrypting the encryption keys for encrypting messages to be communicated between 
the mobile node and the home domain, and between the mobile node and the foreign domain. 

24. (Original) The method of claim 22, further comprising: 
decrypting one or more of the encrypted encryption keys. 

25. (Original) The method of claim 16, wherein generating the registration reply 
comprises: 

generating a first encryption key for encrypting messages to be communicated between 
the mobile node and the home domain; 

generating a second encryption key for encrypting messages to be communicated 
between the foreign domain and the home domain; and 
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generating a third encryption key for encrypting messages to be communicated between 
the foreign domain and mobile node. 

26. (Original) The method of claim 22, wherein generating the registration reply 
comprises encrypting at least one of the first and third encryption keys. 

27. (Original) The method of claim 26, further comprising: 
decrypting at least one of the encrypted first and third encryption keys. 

28. (Original) The method of claim 16, wherein the registration reply includes: 
encryption keys that are encrypted; and 

encryption keys that are not encrypted. 

29. (Original) The method of claim 28, further including: 

extracting one or more of the encryption keys that are not encrypted from the registration 

reply. 

30. (Original) The method of claim 28, further including: 

extracting and decrypting one or more of the encryption keys that are encrypted from the 
registration reply. 

31-127. (Canceled) 

128. (New) A method of providing secure communication between a mobile node and 
home domain using a foreign domain, comprising: 

transmitting a registration request from the mobile node to the home domain, the 
registration request including an identity of a user of the mobile node in encrypted form and 
network routing information in non-encrypted form; 
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receiving and authenticating, by the home domain, the registration request from the 
mobile node; 

requesting and receiving, by the home domain, a plurality of encryption keys for 
encrypting messages communicated between and among the mobile node, home domain, and the 
foreign domain; 

generating, by the home domain, a registration reply including the plurality of encryption 
keys; and 

transmitting the registration reply from the home domain to the foreign domain and the 
mobile node. 

129. (New) The method of claim 128, wherein the requesting and receiving, by the 
home domain, the plurality of encryption keys includes: 

requesting the plurality of encryption keys from a key distribution center; 
generating, by the key distribution center, the plurality of encryption keys; and 
transmitting, by the key distribution center, the plurality of encryption keys to the home 
domain. 

130. (New) The method of claim 129, wherein the generating, by the key distribution 
center, the plurality of encryption keys includes: 

generating a first encryption key for encrypting messages to be communicated between 
the mobile node and the home domain; 

generating a second encryption key for encrypting messages to be communicated 
between the foreign domain and the home domain; and 

generating a third encryption key for encrypting messages to be communicated between 
the foreign domain and mobile node. 

131. (New) The method of claim 128, wherein the transmitting the registration request 
from the mobile node to the home domain includes encrypting the identity of the user of the 
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mobile node using a predefined encryption key that is generated during an initialization process 
between the mobile node and home domain. 

132. (New) The method of claim 131, further comprising: 

encrypting at least one of the plurality of encryption keys using the predefined encryption 
key, wherein the registration reply includes the encrypted at least one of the plurality of 
encryption keys; and 

extracting and decrypting, by the mobile node, the encrypted at least one of the 
encryption keys from the registration reply. 
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